http://eeepppp.cn/1.exe

显示全部楼层 · 发表于 2008-11-20 20:41:57

2008-11-20 20:42:01 创建注册表值    操作:阻止
进程路径:C:\Documents and Settings\明明\桌面\1.exe
注册表路径:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QQDoctor.exe
注册表名称:[Key]
触发规则:高优先规则->受保护的注册表->*\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options*

2008-11-20 20:42:01 创建注册表值    操作:阻止
进程路径:C:\Documents and Settings\明明\桌面\1.exe
注册表路径:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QQDoctor.exe
注册表名称:[Key]
触发规则:高优先规则->受保护的注册表->*\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options*

2008-11-20 20:42:01 创建注册表值    操作:阻止
进程路径:C:\Documents and Settings\明明\桌面\1.exe
注册表路径:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DrRtp.exe
注册表名称:[Key]
触发规则:高优先规则->受保护的注册表->*\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options*

2008-11-20 20:42:01 创建注册表值    操作:阻止
进程路径:C:\Documents and Settings\明明\桌面\1.exe
注册表路径:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DrRtp.exe
注册表名称:[Key]
触发规则:高优先规则->受保护的注册表->*\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options*

2008-11-20 20:42:01 创建注册表值    操作:阻止
进程路径:C:\Documents and Settings\明明\桌面\1.exe
注册表路径:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360tray.exe
注册表名称:[Key]
触发规则:高优先规则->受保护的注册表->*\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options*

2008-11-20 20:42:01 创建注册表值    操作:阻止
进程路径:C:\Documents and Settings\明明\桌面\1.exe
注册表路径:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360tray.exe
注册表名称:[Key]
触发规则:高优先规则->受保护的注册表->*\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options*

2008-11-20 20:42:01 创建文件    操作:阻止并结束进程
进程路径:C:\Documents and Settings\明明\桌面\1.exe
文件路径:C:\WINDOWS\system\llwzjy081120.exe
触发规则:所有程序规则->可执行文件规则->%windir%\*.exe

显示全部楼层 · 发表于 2008-11-20 21:22:02

是的,IFEO3个
360+QQ医生

显示全部楼层 · 发表于 2008-11-20 21:30:20

Begin scan in 'E:\Download\Virus\1.exe'
E:\Download\Virus\1.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-11-20 21:34:31

显示全部楼层 · 发表于 2008-11-20 23:33:03

没人上报啊

To KL

显示全部楼层 · 发表于 2008-11-20 23:36:35

334081f907843fdafbcf74b44ae6ce0e  1.ex2e
c898cd2f45a402c0a8204be97aedba50  2.ex3e
d52e8bcd6e6aa3402acd92c48e3371af  3.e3xe
c16261c2d9e24b5e7e19f091996682c6  4.ex3e
e1b8e7683e2a98b4bb9253aea50cf4a0  5.exe3

相信楼上沒上报2-5

TO KL

显示全部楼层 · 发表于 2008-11-20 23:38:41

原帖由 尤金卡巴斯基 于 2008-11-20 23:33 发表
没人上报啊
To KL

有我在能没人上报？

1.exe_ - Worm.Win32.AutoRun.sos

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2008-11-20 23:42:37

SOS

显示全部楼层 · 发表于 2008-11-20 23:43:34

回信很快

Hello,

1.exe_ - Worm.Win32.AutoRun.sor

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

显示全部楼层 · 发表于 2008-11-20 23:44:54

没看见标记啊

[病毒样本] http://eeepppp.cn/1.exe

本帖子中包含更多资源

本帖子中包含更多资源

回复 17楼 wangjay1980 的帖子

回复 17楼 wangjay1980 的帖子

浏览过的版块